DNSSEC Analyzer - zsoltsandor.me

Domain Name:

Time: 2020-09-19 16:30:52 UTC, NTP stratum 4

Analyzing DNSSEC problems for zsoltsandor.me

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1139 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (1139 bytes) ;; HEADER SECTION ;; id = 13406 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201010000000 20200919000000 20326 . gNV6AU+66kB5XldvckVd/ldhaWTu0rO589zdyHDODOwQ1murJshvt8cjBw3G3G4xO06I1gCKT2HW IJLEEhhvQSRvowbcIW3EocWtTZjeQvCp4U1449doRAiUblpQi7EIstdOxIzcttvh0VcIRecWV7Fl 3kvBzEhpwX42EKXaWUV58Rrn/43o/bRSgh3XBSDwIuIsZVJiMMvHdgm0a5FM6jNHxuuXT1DLlXgL Qyggm/PFciUKTXAo91f6HiyWGNZY9AfAAlvprPiyFOCjBotvk7F5Bi5ss1p8mxl522t/8UuSKcFz qE1J3U4IisgEjTkyxnbCJqY/vKJcyPU8fCzxEg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201010000000 20200919000000 20326 . gNV6AU+66kB5XldvckVd/ldhaWTu0rO589zdyHDODOwQ1murJshvt8cjBw3G3G4xO06I1gCKT2HW IJLEEhhvQSRvowbcIW3EocWtTZjeQvCp4U1449doRAiUblpQi7EIstdOxIzcttvh0VcIRecWV7Fl 3kvBzEhpwX42EKXaWUV58Rrn/43o/bRSgh3XBSDwIuIsZVJiMMvHdgm0a5FM6jNHxuuXT1DLlXgL Qyggm/PFciUKTXAo91f6HiyWGNZY9AfAAlvprPiyFOCjBotvk7F5Bi5ss1p8mxl522t/8UuSKcFz qE1J3U4IisgEjTkyxnbCJqY/vKJcyPU8fCzxEg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46594 is now in the chain-of-trust
	DNSKEY=26116 is now in the chain-of-trust
	Query to j.root-servers.net for zsoltsandor.me/A
	Received 723 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (723 bytes) ;; HEADER SECTION ;; id = 50185 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) me. 172800 IN NS c0.nic.me. me. 172800 IN NS a0.nic.me. me. 172800 IN NS b2.nic.me. me. 172800 IN NS b0.nic.me. me. 172800 IN NS a2.nic.me. me. 86400 IN DS 2569 7 1 09ba1eb4d20402620881fd9848994417800db26a me. 86400 IN DS ( 2569 7 2 94e798106f033500e67567b197ae9132c0e916764dc743c55a9eca3c7bf559e2 ) me. 86400 IN RRSIG ( DS 8 1 86400 20201002050000 20200919040000 46594 . T1+AM5vXXagxlssIqeJA7ZwejWeAryOTXzYztWovHf5cE3ATFiYkg7Ym/b7sTAp1IZX2h5SxrQWr 8CJAx99dQy25NrmCNnnpPX9eflS+ddYnkha69LIxn9dDnBHBHDlPiXppWk73JsYA5Xt8h4kIpyC1 r9oqtDmTHyRYUSDZOPKHkApgiv7x6NR8vPLCNw+774KT1dPTH5TDU1+VH/l7Q36N8JMcCdwjCtPr H/md7SrKAEgFbJmd6XyO/AYNvsjzaJDb6i8QyBHzL8iNosH6zR99ke4lxhFwNBLyK3+TaLU+6lem HUnacOPm57HxYoYTcC4C41jjWb/bB9aw38XBCQ== ) ;; ADDITIONAL SECTION (11 records) c0.nic.me. 172800 IN A 199.253.61.1 c0.nic.me. 172800 IN AAAA 2001:500:55::1 a0.nic.me. 172800 IN A 199.253.59.1 a0.nic.me. 172800 IN AAAA 2001:500:53::1 b2.nic.me. 172800 IN A 199.249.127.1 b2.nic.me. 172800 IN AAAA 2001:500:4f::1 b0.nic.me. 172800 IN A 199.253.60.1 b0.nic.me. 172800 IN AAAA 2001:500:54::1 a2.nic.me. 172800 IN A 199.249.119.1 a2.nic.me. 172800 IN AAAA 2001:500:47::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to m.root-servers.net for me/DNSKEY
	Received 711 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (711 bytes) ;; HEADER SECTION ;; id = 51507 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; me. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) me. 172800 IN NS a0.nic.me. me. 172800 IN NS b0.nic.me. me. 172800 IN NS a2.nic.me. me. 172800 IN NS c0.nic.me. me. 172800 IN NS b2.nic.me. me. 86400 IN DS 2569 7 1 09ba1eb4d20402620881fd9848994417800db26a me. 86400 IN DS ( 2569 7 2 94e798106f033500e67567b197ae9132c0e916764dc743c55a9eca3c7bf559e2 ) me. 86400 IN RRSIG ( DS 8 1 86400 20201002050000 20200919040000 46594 . T1+AM5vXXagxlssIqeJA7ZwejWeAryOTXzYztWovHf5cE3ATFiYkg7Ym/b7sTAp1IZX2h5SxrQWr 8CJAx99dQy25NrmCNnnpPX9eflS+ddYnkha69LIxn9dDnBHBHDlPiXppWk73JsYA5Xt8h4kIpyC1 r9oqtDmTHyRYUSDZOPKHkApgiv7x6NR8vPLCNw+774KT1dPTH5TDU1+VH/l7Q36N8JMcCdwjCtPr H/md7SrKAEgFbJmd6XyO/AYNvsjzaJDb6i8QyBHzL8iNosH6zR99ke4lxhFwNBLyK3+TaLU+6lem HUnacOPm57HxYoYTcC4C41jjWb/bB9aw38XBCQ== ) ;; ADDITIONAL SECTION (11 records) a0.nic.me. 172800 IN A 199.253.59.1 a2.nic.me. 172800 IN A 199.249.119.1 b0.nic.me. 172800 IN A 199.253.60.1 b2.nic.me. 172800 IN A 199.249.127.1 c0.nic.me. 172800 IN A 199.253.61.1 a0.nic.me. 172800 IN AAAA 2001:500:53::1 a2.nic.me. 172800 IN AAAA 2001:500:47::1 b0.nic.me. 172800 IN AAAA 2001:500:54::1 b2.nic.me. 172800 IN AAAA 2001:500:4f::1 c0.nic.me. 172800 IN AAAA 2001:500:55::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone me

	Checking DS between . and me
	Query to a.root-servers.net for me/DS
	Received 402 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (402 bytes) ;; HEADER SECTION ;; id = 43244 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; me. IN DS ;; ANSWER SECTION (3 records) me. 86400 IN DS 2569 7 1 09ba1eb4d20402620881fd9848994417800db26a me. 86400 IN DS ( 2569 7 2 94e798106f033500e67567b197ae9132c0e916764dc743c55a9eca3c7bf559e2 ) me. 86400 IN RRSIG ( DS 8 1 86400 20201002050000 20200919040000 46594 . T1+AM5vXXagxlssIqeJA7ZwejWeAryOTXzYztWovHf5cE3ATFiYkg7Ym/b7sTAp1IZX2h5SxrQWr 8CJAx99dQy25NrmCNnnpPX9eflS+ddYnkha69LIxn9dDnBHBHDlPiXppWk73JsYA5Xt8h4kIpyC1 r9oqtDmTHyRYUSDZOPKHkApgiv7x6NR8vPLCNw+774KT1dPTH5TDU1+VH/l7Q36N8JMcCdwjCtPr H/md7SrKAEgFbJmd6XyO/AYNvsjzaJDb6i8QyBHzL8iNosH6zR99ke4lxhFwNBLyK3+TaLU+6lem HUnacOPm57HxYoYTcC4C41jjWb/bB9aw38XBCQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for me in the . zone
	DS=2569/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=2569/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`me. 86400 IN RRSIG ( DS 8 1 86400 20201002050000 20200919040000 46594 . T1+AM5vXXagxlssIqeJA7ZwejWeAryOTXzYztWovHf5cE3ATFiYkg7Ym/b7sTAp1IZX2h5SxrQWr 8CJAx99dQy25NrmCNnnpPX9eflS+ddYnkha69LIxn9dDnBHBHDlPiXppWk73JsYA5Xt8h4kIpyC1 r9oqtDmTHyRYUSDZOPKHkApgiv7x6NR8vPLCNw+774KT1dPTH5TDU1+VH/l7Q36N8JMcCdwjCtPr H/md7SrKAEgFbJmd6XyO/AYNvsjzaJDb6i8QyBHzL8iNosH6zR99ke4lxhFwNBLyK3+TaLU+6lem HUnacOPm57HxYoYTcC4C41jjWb/bB9aw38XBCQ== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=2569/SHA-1 is now in the chain-of-trust
	`me. 86400 IN DS 2569 7 1 09ba1eb4d20402620881fd9848994417800db26a`
	`me. 86400 IN DS ( 2569 7 2 94e798106f033500e67567b197ae9132c0e916764dc743c55a9eca3c7bf559e2 )`
	Query to a0.nic.me for me/DNSKEY
	Received 1459 bytes from 199.253.59.1
	;; Answer received from 199.253.59.1 (1459 bytes) ;; HEADER SECTION ;; id = 10881 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; me. IN DNSKEY ;; ANSWER SECTION (6 records) me. 900 IN DNSKEY ( 256 3 7 AwEAAaK17L7PNyNYsLz2BCIdYZSyzY4lhfkSeUqKeaos/y56T5kwvP/4fCeWyaTYnk4ErAxwh1R7 ZNZ+baX9uRBHCRlZUWnwzORwe8SemKpo7zBM9nEU2PZWV9xbVFQzDuuF3NrGtAPb1EoRJ6I0R5mM Hcayr4HcFvWZmYYDC3RedN4z ) ; Key ID = 554 me. 900 IN DNSKEY ( 256 3 7 AwEAAaY4/MHJO66Xy/b18PQnGNxNKk58BWaZvaFPeCPjS9yEDWBFFn+nA61F0rh5xS1n2G2ECRWr Bt38g/XZRldk9ZrbnE3mbpVXizcKGLG1aQ5enW8li796nWfV0+GRWoDdGOOXvLm7Z+UP9/kLrWDM X3g5i9XlvP+oV/J0h4UAdA7R ) ; Key ID = 50310 me. 900 IN DNSKEY ( 257 3 7 AwEAAeRV0TwM0wfCUti4a2mvTy/gTfDKFA2E6StlOwWb6FA32ohK9t5tROsh/qWPblIpeqHVspI7 2lf+ItVG0Rw5scO2zf7LonDiyALN+7Fag4H6djY2hfae4k7GzRhraZy7uzxwR0+8NTo9oFtnO2l5 GHPEtOBQ8kWQz6967/k+ILG4pKkk9SdY3q1HtAmCxFz9Vx5ozuUHByVi81frL/u+S9rwPxLub60L 5aSN9SrRI3nbg2GEEus3yyXS/usyCzGMRpRnPUGT0GWke4Es6arCBNem4rsfZFkxlbO0rS9C12vJ zn2VJFeCTp0ZVEmSjh3x9homuYCHRfKJQXdsVAwVors= ) ; Key ID = 53233 me. 900 IN DNSKEY ( 257 3 7 AwEAAXguWrlanOI9LEL+ggmMWlkBo/Vk+WBze4Lk9L2WrLh+AXHBmdCp2fN8XicXtbQWwpc4oRVg rmc65/RxtUmEVCTOzZC9Z9Ufshcte8xHVrGww/7wQQ3DM4g6UC1gkVGJm7LKsF50rhzlRT6r/wzv dYVwXKBdmtau3fwMrBUbooSwRPSw56B/wS8DEGFmie0vphpMCCQGnx7p/GIDxbbWBBwzQr1u/tDj 30YfJ4o1qJcDDA9RESXXAh6Zp/jVV5sT7cI0V90fH6p/CkmNQJ52Stf69uOkCuag2dwruDbVIxU6 2EYYSRetgH4gpABwPVgiVY/g47cIjY0Et8EXc21Kp+s= ) ; Key ID = 2569 me. 900 IN RRSIG ( DNSKEY 7 1 900 20201008152324 20200917142324 2569 me. V0lFLnAlU/gydJHrlHVbHA8lc7VqnEBgxHuyEhcBy0AHVAT5HD+7SI/hpMlcn08URzUEOeMYTFVv tRlSL7H+VyrvYc2g3JR/wb0iShSmzC0u/4eBd+BFbXjhbsLDpHwbzjf9dp+qUHs4juESh0kAkfm/ vJv2OLG5lpu76GP3Dzbg+N6XTzh4SQ7EeoSMLvIGFohzRv+nRJvQv+Srw0RQZ0aBrhmVFo/BPJCt WOl7HGNmh7zPTCPt9tLuTWLUljHRc9YY3ffrxvRk9+TUG+RYC+HlNqi5gprmH2FJp+SKFYi0+DHu gtFVQpIK3dbVQUHmFD/4eFu3DLnkGCUNhDs64Q== ) me. 900 IN RRSIG ( DNSKEY 7 1 900 20201008152324 20200917142324 53233 me. hXKHJZ8r9t+4VsN8LDxNRe9+UoByfiljbHgrdSxxYKLcr6d1zUCXOs/biHCAdQ3i9uJxyNv2/BVg KpkpEnY70A6wBFMcpC26usJIQMIpOmTF1BD2W29FefYz0Toi6B0sKzCHnEZyk+8kEva2W2pPGmaL d4x9XfqW/JIQp8kHjv9lJxPdcN5HJh/JMy+e3w68nY4zxJEezSWigJmFD1OCIBjWUMQ8Dta+KvkY Z3mn3BsJvC0UEfqE0IRCRD0f+sK9arnCCewN/s3q8ruVTqJSQkpEvOQ3iJyNhENoB+XwIdyfZIwN KXfDprzQAlvCTPPGxRA+6XY7/pshPtxa4/Fmlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for me
	`me. 900 IN DNSKEY ( 256 3 7 AwEAAaK17L7PNyNYsLz2BCIdYZSyzY4lhfkSeUqKeaos/y56T5kwvP/4fCeWyaTYnk4ErAxwh1R7 ZNZ+baX9uRBHCRlZUWnwzORwe8SemKpo7zBM9nEU2PZWV9xbVFQzDuuF3NrGtAPb1EoRJ6I0R5mM Hcayr4HcFvWZmYYDC3RedN4z ) ; Key ID = 554`
	`me. 900 IN DNSKEY ( 256 3 7 AwEAAaY4/MHJO66Xy/b18PQnGNxNKk58BWaZvaFPeCPjS9yEDWBFFn+nA61F0rh5xS1n2G2ECRWr Bt38g/XZRldk9ZrbnE3mbpVXizcKGLG1aQ5enW8li796nWfV0+GRWoDdGOOXvLm7Z+UP9/kLrWDM X3g5i9XlvP+oV/J0h4UAdA7R ) ; Key ID = 50310`
	`me. 900 IN DNSKEY ( 257 3 7 AwEAAeRV0TwM0wfCUti4a2mvTy/gTfDKFA2E6StlOwWb6FA32ohK9t5tROsh/qWPblIpeqHVspI7 2lf+ItVG0Rw5scO2zf7LonDiyALN+7Fag4H6djY2hfae4k7GzRhraZy7uzxwR0+8NTo9oFtnO2l5 GHPEtOBQ8kWQz6967/k+ILG4pKkk9SdY3q1HtAmCxFz9Vx5ozuUHByVi81frL/u+S9rwPxLub60L 5aSN9SrRI3nbg2GEEus3yyXS/usyCzGMRpRnPUGT0GWke4Es6arCBNem4rsfZFkxlbO0rS9C12vJ zn2VJFeCTp0ZVEmSjh3x9homuYCHRfKJQXdsVAwVors= ) ; Key ID = 53233`
	`me. 900 IN DNSKEY ( 257 3 7 AwEAAXguWrlanOI9LEL+ggmMWlkBo/Vk+WBze4Lk9L2WrLh+AXHBmdCp2fN8XicXtbQWwpc4oRVg rmc65/RxtUmEVCTOzZC9Z9Ufshcte8xHVrGww/7wQQ3DM4g6UC1gkVGJm7LKsF50rhzlRT6r/wzv dYVwXKBdmtau3fwMrBUbooSwRPSw56B/wS8DEGFmie0vphpMCCQGnx7p/GIDxbbWBBwzQr1u/tDj 30YfJ4o1qJcDDA9RESXXAh6Zp/jVV5sT7cI0V90fH6p/CkmNQJ52Stf69uOkCuag2dwruDbVIxU6 2EYYSRetgH4gpABwPVgiVY/g47cIjY0Et8EXc21Kp+s= ) ; Key ID = 2569`
	DNSKEY=2569/SEP is now in the chain-of-trust
	DS=2569/SHA-1 verifies DNSKEY=2569/SEP
	DS=2569/SHA-256 verifies DNSKEY=2569/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`me. 900 IN RRSIG ( DNSKEY 7 1 900 20201008152324 20200917142324 2569 me. V0lFLnAlU/gydJHrlHVbHA8lc7VqnEBgxHuyEhcBy0AHVAT5HD+7SI/hpMlcn08URzUEOeMYTFVv tRlSL7H+VyrvYc2g3JR/wb0iShSmzC0u/4eBd+BFbXjhbsLDpHwbzjf9dp+qUHs4juESh0kAkfm/ vJv2OLG5lpu76GP3Dzbg+N6XTzh4SQ7EeoSMLvIGFohzRv+nRJvQv+Srw0RQZ0aBrhmVFo/BPJCt WOl7HGNmh7zPTCPt9tLuTWLUljHRc9YY3ffrxvRk9+TUG+RYC+HlNqi5gprmH2FJp+SKFYi0+DHu gtFVQpIK3dbVQUHmFD/4eFu3DLnkGCUNhDs64Q== )`
	`me. 900 IN RRSIG ( DNSKEY 7 1 900 20201008152324 20200917142324 53233 me. hXKHJZ8r9t+4VsN8LDxNRe9+UoByfiljbHgrdSxxYKLcr6d1zUCXOs/biHCAdQ3i9uJxyNv2/BVg KpkpEnY70A6wBFMcpC26usJIQMIpOmTF1BD2W29FefYz0Toi6B0sKzCHnEZyk+8kEva2W2pPGmaL d4x9XfqW/JIQp8kHjv9lJxPdcN5HJh/JMy+e3w68nY4zxJEezSWigJmFD1OCIBjWUMQ8Dta+KvkY Z3mn3BsJvC0UEfqE0IRCRD0f+sK9arnCCewN/s3q8ruVTqJSQkpEvOQ3iJyNhENoB+XwIdyfZIwN KXfDprzQAlvCTPPGxRA+6XY7/pshPtxa4/Fmlg== )`
	RRSIG=2569 and DNSKEY=2569/SEP verifies the DNSKEY RRset
	RRSIG=53233 and DNSKEY=53233/SEP verifies the DNSKEY RRset
	DNSKEY=554 is now in the chain-of-trust
	DNSKEY=50310 is now in the chain-of-trust
	DNSKEY=53233/SEP is now in the chain-of-trust
	Query to b2.nic.me for zsoltsandor.me/A
	Received 330 bytes from 199.249.127.1
	;; Answer received from 199.249.127.1 (330 bytes) ;; HEADER SECTION ;; id = 8880 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) zsoltsandor.me. 86400 IN NS ns-12-a.gandi.net. zsoltsandor.me. 86400 IN NS ns-171-b.gandi.net. zsoltsandor.me. 86400 IN NS ns-241-c.gandi.net. zsoltsandor.me. 86400 IN DS ( 12085 13 2 e8a2480f04ff4096ce19c16539ed20dc82bc49c124dcf7d9f67d999c84983323 ) zsoltsandor.me. 86400 IN RRSIG ( DS 7 2 86400 20201008152324 20200917142324 50310 me. d+dVI2eKr+1bYKLlnJEhAvg+EXTX5KdlhNEzmQzbHrdnxcxPTCF9B9iljDFP1q08AOM+inGS8jo5 PQzljEXVbb9AjhEq2W5HqWnA3Iw3xSBUwjpvdrvo2zmBp3lvOabuj3sO77gf9DyONzEHXDwNaulf L6ryKnQlj/9cMtH8vmI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to c0.nic.me for zsoltsandor.me/DNSKEY
	Received 330 bytes from 199.253.61.1
	;; Answer received from 199.253.61.1 (330 bytes) ;; HEADER SECTION ;; id = 47585 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) zsoltsandor.me. 86400 IN NS ns-241-c.gandi.net. zsoltsandor.me. 86400 IN NS ns-12-a.gandi.net. zsoltsandor.me. 86400 IN NS ns-171-b.gandi.net. zsoltsandor.me. 86400 IN DS ( 12085 13 2 e8a2480f04ff4096ce19c16539ed20dc82bc49c124dcf7d9f67d999c84983323 ) zsoltsandor.me. 86400 IN RRSIG ( DS 7 2 86400 20201008152324 20200917142324 50310 me. d+dVI2eKr+1bYKLlnJEhAvg+EXTX5KdlhNEzmQzbHrdnxcxPTCF9B9iljDFP1q08AOM+inGS8jo5 PQzljEXVbb9AjhEq2W5HqWnA3Iw3xSBUwjpvdrvo2zmBp3lvOabuj3sO77gf9DyONzEHXDwNaulf L6ryKnQlj/9cMtH8vmI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone zsoltsandor.me

zsoltsandor.me

	Checking DS between me and zsoltsandor.me
	Query to b2.nic.me for zsoltsandor.me/DS
	Received 253 bytes from 199.249.127.1
	;; Answer received from 199.249.127.1 (253 bytes) ;; HEADER SECTION ;; id = 53687 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN DS ;; ANSWER SECTION (2 records) zsoltsandor.me. 86400 IN DS ( 12085 13 2 e8a2480f04ff4096ce19c16539ed20dc82bc49c124dcf7d9f67d999c84983323 ) zsoltsandor.me. 86400 IN RRSIG ( DS 7 2 86400 20201008152324 20200917142324 50310 me. d+dVI2eKr+1bYKLlnJEhAvg+EXTX5KdlhNEzmQzbHrdnxcxPTCF9B9iljDFP1q08AOM+inGS8jo5 PQzljEXVbb9AjhEq2W5HqWnA3Iw3xSBUwjpvdrvo2zmBp3lvOabuj3sO77gf9DyONzEHXDwNaulf L6ryKnQlj/9cMtH8vmI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for zsoltsandor.me in the me zone
	DS=12085/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`zsoltsandor.me. 86400 IN RRSIG ( DS 7 2 86400 20201008152324 20200917142324 50310 me. d+dVI2eKr+1bYKLlnJEhAvg+EXTX5KdlhNEzmQzbHrdnxcxPTCF9B9iljDFP1q08AOM+inGS8jo5 PQzljEXVbb9AjhEq2W5HqWnA3Iw3xSBUwjpvdrvo2zmBp3lvOabuj3sO77gf9DyONzEHXDwNaulf L6ryKnQlj/9cMtH8vmI= )`
	RRSIG=50310 and DNSKEY=50310 verifies the DS RRset
	DS=12085/SHA-256 is now in the chain-of-trust
	`zsoltsandor.me. 86400 IN DS ( 12085 13 2 e8a2480f04ff4096ce19c16539ed20dc82bc49c124dcf7d9f67d999c84983323 )`
	Query to ns-171-b.gandi.net for zsoltsandor.me/DNSKEY
	Received 233 bytes from 213.167.230.172
	;; Answer received from 213.167.230.172 (233 bytes) ;; HEADER SECTION ;; id = 4487 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN DNSKEY ;; ANSWER SECTION (2 records) zsoltsandor.me. 10800 IN DNSKEY ( 256 3 13 rrz64U7dr4XzGIOTnE93VWXJYjQX4vR0v8Ws4ELtQjpQGor1444qJN0xCwC6kXuHESzVrR83Rwmz BalRAQKBMA== ) ; Key ID = 12085 zsoltsandor.me. 10800 IN RRSIG ( DNSKEY 13 2 10800 20201001000000 20200910000000 12085 zsoltsandor.me. 9BS9SDErWffVuSp9OiMPRFMy4b3VJuJ7sSep8xyBSD+q8bwg66HwJY849DxMhwTbx7TQtxtTypex 2q82CDnB7Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for zsoltsandor.me
	`zsoltsandor.me. 10800 IN DNSKEY ( 256 3 13 rrz64U7dr4XzGIOTnE93VWXJYjQX4vR0v8Ws4ELtQjpQGor1444qJN0xCwC6kXuHESzVrR83Rwmz BalRAQKBMA== ) ; Key ID = 12085`
	DNSKEY=12085 is now in the chain-of-trust
	DS=12085/SHA-256 verifies DNSKEY=12085
	Found 1 RRSIGs over DNSKEY RRset
	`zsoltsandor.me. 10800 IN RRSIG ( DNSKEY 13 2 10800 20201001000000 20200910000000 12085 zsoltsandor.me. 9BS9SDErWffVuSp9OiMPRFMy4b3VJuJ7sSep8xyBSD+q8bwg66HwJY849DxMhwTbx7TQtxtTypex 2q82CDnB7Q== )`
	RRSIG=12085 and DNSKEY=12085 verifies the DNSKEY RRset
	Query to ns-171-b.gandi.net for zsoltsandor.me/A
	Received 408 bytes from 213.167.230.172
	;; Answer received from 213.167.230.172 (408 bytes) ;; HEADER SECTION ;; id = 56743 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) zsoltsandor.me. 10800 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1600300800 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) zsoltsandor.me. 10800 IN RRSIG ( SOA 13 2 10800 20201001000000 20200910000000 12085 zsoltsandor.me. 2sXbpH6ElFakrwlQZTunpLeLwd2S6EfnMpvuU14+es94C4ALSIgXWNMi0TxSwS0MVSEWRbV6Od03 spPHS9VJXA== ) vhfnd54564sampl2nh4ba2qs1dhp5sfr.zsoltsandor.me. 10800 IN NSEC3 ( 1 0 3 ea33014a vhfnd54564sampl2nh4ba2qs1dhp5sfs NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CDS ) vhfnd54564sampl2nh4ba2qs1dhp5sfr.zsoltsandor.me. 10800 IN RRSIG ( NSEC3 13 3 10800 20201001000000 20200910000000 12085 zsoltsandor.me. JsvNS/YzSt97B+SI4QgssR5ap21U43L/QfZlHdQDqaVVy5y+1qVCzccjDApaAESoxdJyfOklw/P0 AeDmX+Y/8w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	zsoltsandor.me is authoritative for zsoltsandor.me
	Found RRSIG signed by zsoltsandor.me zone
	Query to ns-12-a.gandi.net for zsoltsandor.me/SOA
	Received 213 bytes from 173.246.100.13
	;; Answer received from 173.246.100.13 (213 bytes) ;; HEADER SECTION ;; id = 60618 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN SOA ;; ANSWER SECTION (2 records) zsoltsandor.me. 10800 IN RRSIG ( SOA 13 2 10800 20201001000000 20200910000000 12085 zsoltsandor.me. h7asxoJSf7xBtT5i9RLHzaln1FbGLItX/kk1xrnSrDDDcllM0NhJbTmelUAorHRLrMz0Knje5TE1 acdH+a330Q== ) zsoltsandor.me. 10800 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1600300800 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns-241-c.gandi.net for zsoltsandor.me/SOA
	Received 213 bytes from 217.70.187.242
	;; Answer received from 217.70.187.242 (213 bytes) ;; HEADER SECTION ;; id = 30560 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN SOA ;; ANSWER SECTION (2 records) zsoltsandor.me. 10800 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1600300800 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) zsoltsandor.me. 10800 IN RRSIG ( SOA 13 2 10800 20201001000000 20200910000000 12085 zsoltsandor.me. Rm1AqOCOubFsbh+wHzeFZp86Qmz1S8R/f1hp8uyRQof5S6mDNWjGfxRn1Zu5OyuM7Wvje4RzqIo2 fGiOr7ou9A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns-171-b.gandi.net for zsoltsandor.me/SOA
	Received 213 bytes from 213.167.230.172
	;; Answer received from 213.167.230.172 (213 bytes) ;; HEADER SECTION ;; id = 57890 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN SOA ;; ANSWER SECTION (2 records) zsoltsandor.me. 10800 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1600300800 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) zsoltsandor.me. 10800 IN RRSIG ( SOA 13 2 10800 20201001000000 20200910000000 12085 zsoltsandor.me. T5Kl9qr7MjKyiJiu1LxFFyr2mpFvry4fIKhKkD+NeNnev5lja8d5RrcbNxnJ1wId6lBLb1z9oNo3 5ihzSOq/Wg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns-171-b.gandi.net for zsoltsandor.me/A
	Received 408 bytes from 213.167.230.172
	;; Answer received from 213.167.230.172 (408 bytes) ;; HEADER SECTION ;; id = 44940 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) zsoltsandor.me. 10800 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1600300800 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) zsoltsandor.me. 10800 IN RRSIG ( SOA 13 2 10800 20201001000000 20200910000000 12085 zsoltsandor.me. 2sXbpH6ElFakrwlQZTunpLeLwd2S6EfnMpvuU14+es94C4ALSIgXWNMi0TxSwS0MVSEWRbV6Od03 spPHS9VJXA== ) vhfnd54564sampl2nh4ba2qs1dhp5sfr.zsoltsandor.me. 10800 IN NSEC3 ( 1 0 3 ea33014a vhfnd54564sampl2nh4ba2qs1dhp5sfs NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CDS ) vhfnd54564sampl2nh4ba2qs1dhp5sfr.zsoltsandor.me. 10800 IN RRSIG ( NSEC3 13 3 10800 20201001000000 20200910000000 12085 zsoltsandor.me. JsvNS/YzSt97B+SI4QgssR5ap21U43L/QfZlHdQDqaVVy5y+1qVCzccjDApaAESoxdJyfOklw/P0 AeDmX+Y/8w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`zsoltsandor.me. 10800 IN RRSIG ( SOA 13 2 10800 20201001000000 20200910000000 12085 zsoltsandor.me. 2sXbpH6ElFakrwlQZTunpLeLwd2S6EfnMpvuU14+es94C4ALSIgXWNMi0TxSwS0MVSEWRbV6Od03 spPHS9VJXA== )`
	RRSIG=12085 and DNSKEY=12085 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test zsoltsandor.me at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: